Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: kFLf8LvrUV5EpnL/0vQkrKOwThEEQJAtgPE78jQ6P5w=
Subject key identifier: 11:87:8A:75:09:08:65:63:0E:33:45:28:17:AD:77:FC:2A:2C:3A:D4
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 0199FBEBBA6D45EFA697C12C4D750B7AE78C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:33 +0000
Manifest this update: Sun 19 Oct 2025 10:02:33 +0000
Manifest next update: Mon 20 Oct 2025 10:02:33 +0000
Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=)
2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=)
3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: r+Xlp0HcdT6lgLqjD0cSvI496lHqXnA90f3Gc2r7id8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ba:6d:45:ef:a6:97:c1:2c:4d:75:0b:7a:e7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Oct 19 10:02:33 2025 GMT
Not After : Oct 20 10:02:33 2025 GMT
Subject: CN=11878a75090865630e33452817ad77fc2a2c3ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:0a:dd:b6:9a:3f:b0:b0:f4:b7:40:af:3e:
f7:2e:81:12:42:27:26:4c:26:2c:a3:61:63:d3:43:
c5:33:c0:97:9a:5b:2f:29:22:a1:eb:5c:93:fa:70:
58:86:d1:76:65:3c:00:ea:a0:e2:21:c0:46:b4:80:
cb:ad:71:87:c3:ed:4c:bd:18:9d:34:5f:ee:b0:77:
fe:d1:68:a9:ac:5c:96:1d:1d:ec:38:c4:11:10:29:
d2:01:03:54:2d:f7:0f:43:0e:43:3c:5c:ab:6f:12:
6b:14:7e:7e:d9:3b:0b:25:61:dd:19:1e:0d:f0:a9:
d0:83:9d:76:e1:cb:7f:d8:46:47:2d:cb:19:5a:81:
87:3b:02:ef:21:e7:46:1d:30:89:70:c0:6a:a4:bb:
ac:62:d4:b7:35:04:3f:ea:49:c4:c8:6e:78:1f:92:
56:9a:33:01:c0:55:be:78:f0:15:bd:9a:f3:69:41:
6a:40:83:ec:1b:7e:3b:1d:fa:72:ba:6c:79:bf:cb:
b8:f8:fa:27:95:98:a6:c7:71:5a:34:70:14:bc:d5:
35:3a:c0:c1:99:27:5a:fc:58:b8:d3:6e:b6:09:a3:
b0:99:ab:56:ad:bc:e6:b6:66:c6:ee:fe:d7:86:ae:
4f:c9:09:5f:f0:22:9c:3e:a6:9c:4c:3e:a1:1f:23:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:87:8A:75:09:08:65:63:0E:33:45:28:17:AD:77:FC:2A:2C:3A:D4
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0d:52:33:e2:d4:ea:22:20:f5:fa:ed:7d:4a:74:2a:f6:b2:
b3:77:10:90:77:05:f5:7b:27:b2:66:aa:d7:aa:7c:18:99:7d:
45:ae:2f:4a:ee:c8:11:52:30:ff:e0:eb:ed:7c:ae:d4:c1:54:
94:cf:26:43:45:32:4c:8f:9b:aa:7c:21:3a:1c:39:6f:71:be:
1c:8a:bf:1b:ac:18:53:2a:5f:40:d1:7a:a9:d0:ba:f4:6c:f4:
b5:65:6b:c4:b8:fb:95:a9:59:2b:08:a4:55:e1:81:92:c5:fc:
6a:f6:d2:8b:6a:67:d2:87:96:7a:e0:9d:d7:31:87:a3:b5:c3:
c9:6d:35:45:8c:04:b1:e5:f3:ec:e0:b0:11:38:a6:c5:9f:df:
91:89:34:51:b2:d0:67:7d:54:9b:eb:80:6d:de:95:ed:5f:66:
43:9f:09:6e:e1:60:3d:08:92:a6:5f:49:50:e2:89:c2:2c:b1:
79:29:4b:49:c1:74:e5:f7:18:f2:b4:c6:16:df:f0:74:71:66:
dd:3c:e7:47:df:98:38:b0:d6:6d:2c:56:34:e9:6c:db:7f:dd:
86:f4:a0:e5:1d:4a:fe:bb:ec:68:c7:1c:cc:3d:d6:da:95:45:
a6:5b:26:65:ea:38:c5:2b:1e:a8:c7:ab:ca:57:9f:55:36:2d:
d9:2b:b3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:57 2025 by rpki-client